This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/STW/ctbYvQlOL6j448wTy_8FTGZ-sBI.roa
File:                     ctbYvQlOL6j448wTy_8FTGZ-sBI.roa (raw, json)
Hash identifier:          XQt96vsMeGS6Wi8KdRRheyyn73riNaI61YlxOlZq/b8=
Subject key identifier:   72:D6:D8:BD:09:4E:2F:A8:F8:E3:CC:13:CB:FF:05:4C:66:7E:B0:12
Certificate issuer:       /CN=C758420CF762E48AD7CAA60EB39DCD622B1FB4F6
Certificate serial:       01B4
Authority key identifier: C7:58:42:0C:F7:62:E4:8A:D7:CA:A6:0E:B3:9D:CD:62:2B:1F:B4:F6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/x1hCDPdi5IrXyqYOs53NYisftPY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/ctbYvQlOL6j448wTy_8FTGZ-sBI.roa
Signing time:             Sat 27 Dec 2025 15:40:34 +0000
ROA not before:           Sat 27 Dec 2025 15:40:34 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     63897
IP address blocks:        161.248.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/x1hCDPdi5IrXyqYOs53NYisftPY.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 22:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C758420CF762E48AD7CAA60EB39DCD622B1FB4F6
        Validity
            Not Before: Dec 27 15:40:34 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=72D6D8BD094E2FA8F8E3CC13CBFF054C667EB012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:49:de:dc:21:88:85:63:6b:fa:ad:16:da:d4:
                    90:96:41:a3:c2:43:65:2a:ec:14:de:f1:52:fe:2d:
                    90:5f:03:fd:23:7b:3e:4f:1f:f6:ab:e4:09:5a:9c:
                    57:f3:2b:df:79:81:0d:5c:3d:ff:e4:a9:ae:3b:24:
                    09:d2:5c:54:07:0f:a3:2e:a2:fa:fc:bc:58:42:85:
                    d3:5f:fe:82:af:48:bf:43:a4:ca:b2:70:1a:e1:48:
                    b5:6e:bc:fd:cb:1b:d7:3a:a5:e9:ef:81:8a:bc:99:
                    8e:88:c0:97:7c:a5:be:50:20:0a:c3:da:75:58:c1:
                    d3:49:a3:54:7b:6e:cf:ba:6e:df:d7:9b:af:26:fb:
                    a1:e7:9b:fa:8a:58:b7:39:c1:dd:a6:cf:36:2d:ba:
                    78:d7:f0:6d:e4:2c:b6:4a:c8:dc:9d:0a:39:4f:10:
                    b7:97:2e:9e:ca:5b:bb:d8:cc:e6:eb:93:7f:a9:b2:
                    51:e1:34:42:07:e7:cd:66:c3:3d:b3:cc:ec:25:c8:
                    0c:18:f2:54:41:ef:e1:72:e0:51:54:8c:f3:6a:d9:
                    08:ca:db:d5:20:5c:6f:2c:ac:37:81:91:f1:1f:a8:
                    54:66:9f:da:85:dc:b5:a5:dd:3b:d7:f8:3b:5d:5c:
                    5e:d3:ce:ab:cb:d1:28:9f:fb:4c:82:04:ec:93:d1:
                    2c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D6:D8:BD:09:4E:2F:A8:F8:E3:CC:13:CB:FF:05:4C:66:7E:B0:12
            X509v3 Authority Key Identifier:
                keyid:C7:58:42:0C:F7:62:E4:8A:D7:CA:A6:0E:B3:9D:CD:62:2B:1F:B4:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/x1hCDPdi5IrXyqYOs53NYisftPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/x1hCDPdi5IrXyqYOs53NYisftPY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/ctbYvQlOL6j448wTy_8FTGZ-sBI.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:f8:5f:a8:29:0d:cc:ee:7c:83:c0:e3:27:3e:12:37:da:54:
         d6:6e:cb:22:84:95:66:42:d6:c2:ea:38:e8:64:d8:d0:08:2b:
         da:40:d9:5d:66:2b:9c:6a:af:f5:92:36:4f:1a:50:e6:dc:fe:
         a9:ce:9e:aa:0a:3a:50:ec:db:d0:0f:5b:26:06:72:39:c1:cc:
         05:2a:d5:6e:d9:37:4b:f6:4a:71:2a:ed:26:81:2f:48:0a:80:
         fd:06:e9:95:cf:84:d5:e7:82:1a:b6:17:0b:83:5b:89:78:17:
         f7:63:e2:6d:a3:90:38:f3:b4:4d:b5:6e:62:6c:a8:86:77:9f:
         74:bd:9f:5e:9a:f9:54:c8:6a:6a:38:05:02:78:04:55:32:5e:
         41:de:30:20:f4:f3:3d:e3:cc:9e:a1:4a:f1:ba:de:0e:45:d8:
         fe:4c:df:d7:d8:07:de:1a:a7:e3:02:8f:b1:41:ec:25:72:ed:
         c4:95:af:0c:7e:1a:c5:9f:70:cb:3c:ef:8e:72:49:6a:f4:51:
         d8:73:1e:b7:fc:d1:3b:8e:71:45:70:6e:7c:72:33:e5:bd:63:
         13:98:fc:37:ba:fd:d3:50:98:4b:41:34:2b:cb:d1:5d:b5:c8:
         42:a2:40:ba:be:6a:77:61:2b:a9:93:41:d6:58:2f:4e:22:fc:
         2d:01:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 21:29:54 2026 by rpki-client